[Secure-testing-commits] r50442 - data

[Emilio Pozuelo Monfort]

Author: pochu
Date: 2017-04-07 17:14:31 +0000 (Fri, 07 Apr 2017)
New Revision: 50442

Modified:
   data/dla-needed.txt
Log:
add notes on libxslt

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-04-07 17:01:43 UTC (rev 50441)
+++ data/dla-needed.txt	2017-04-07 17:14:31 UTC (rev 50442)
@@ -65,6 +65,9 @@
   NOTE: 2017-01-20 and 2017-03-09: Ping upstream by private email -- Raphael Hertzog
 --
 libxslt (Emilio Pozuelo)
+  NOTE: it's not clear whether libxslt (the library) should call srand() itself.
+  NOTE: xsltproc 1.1.29 has a --seed-rand option, but that's not present in wheezy,
+  NOTE: and it doesn't help for other libxslt users (e.g. php as seen on the SuSE bug).
 --
 linux
 --